Latest Attack news

New attack uses MSC files and Windows XSS flaw to breach networks

A novel command execution technique dubbed 'GrimResource' uses specially crafted MSC (Microsoft Saved Console) and an unpatched Windows XSS flaw to perform code execution via the Microsoft Management Console.
- Bill Toulas
- June 24, 2024
- 03:03 PM
- 0
Okta warns of "unprecedented" credential stuffing attacks on customers

Okta warns of an "unprecedented" spike in credential stuffing attacks targeting its identity and access management solutions, with some customer accounts breached in the attacks.
- Bill Toulas
- April 27, 2024
- 10:55 AM
- 1
New ‘Loop DoS’ attack may impact up to 300,000 online systems

A new denial-of-service attack dubbed 'Loop DoS' targeting application layer protocols can pair network services into an indefinite communication loop that creates large volumes of traffic.
- Bill Toulas
- March 20, 2024
- 03:40 PM
- 0
New acoustic attack determines keystrokes from typing patterns

Researchers have demonstrated a new acoustic side-channel attack on keyboards that can deduce user input based on their typing patterns, even in poor conditions, such as environments with noise.
- Bill Toulas
- March 17, 2024
- 10:22 AM
- 5
VoltSchemer attacks use wireless chargers to inject voice commands, fry phones

A team of academic researchers show that a new set of attacks called 'VoltSchemer' can inject voice commands to manipulate a smartphone's voice assistant through the magnetic field emitted by an off-the-shelf wireless charger.
- Bill Toulas
- February 20, 2024
- 03:38 PM
- 3
KyberSlash attacks put quantum encryption projects at risk

Multiple implementations of the Kyber key encapsulation mechanism for quantum-safe encryption, are vulnerable to a set of flaws collectively referred to as KyberSlash, which could allow the recovery of secret keys.
- Bill Toulas
- January 07, 2024
- 10:05 AM
- 0
New 'HTTP/2 Rapid Reset' zero-day attack breaks DDoS records

A new DDoS (distributed denial of service) technique named 'HTTP/2 Rapid Reset' has been actively exploited as a zero-day since August, breaking all previous records in magnitude.
- Bill Toulas
- October 10, 2023
- 10:12 AM
- 0
Modern GPUs vulnerable to new GPU.zip side-channel attack

Researchers from four American universities have developed a new GPU side-channel attack that leverages data compression to leak sensitive visual data from modern graphics cards when visiting web pages.
- Bill Toulas
- September 27, 2023
- 10:06 AM
- 3
New ZeroFont phishing tricks Outlook into showing fake AV-scans

Hackers are utilizing a new trick of using zero-point fonts in emails to make malicious emails appear as safely scanned by security tools in Microsoft Outlook.
- Bill Toulas
- September 26, 2023
- 05:32 PM
- 0
New acoustic attack steals data from keystrokes with 95% accuracy

A team of researchers from British universities has trained a deep learning model that can steal data from keyboard keystrokes recorded using a microphone with an accuracy of 95%.
- Bill Toulas
- August 05, 2023
- 10:09 AM
- 9
Hackers exploit zero-day in Ultimate Member WordPress plugin with 200K installs

Hackers exploit a zero-day privilege escalation vulnerability in the 'Ultimate Member' WordPress plugin to compromise websites by bypassing security measures and registering rogue administrator accounts.
- Bill Toulas
- June 30, 2023
- 03:49 PM
- 2
Sponsored Content
A '!password20231#' password may not be as complex as you think

In some ways, past best practices for password policies may have made password cracking easier. Let's examine the most common types of password attacks, and how to defend against them.
- Sponsored by Specops Software
- April 27, 2023
- 10:04 AM
- 0
March 2023 broke ransomware attack records with 459 incidents

March 2023 was the most prolific month recorded by cybersecurity analysts in recent years, measuring 459 attacks, an increase of 91% from the previous month and 62% compared to March 2022.
- Bill Toulas
- April 19, 2023
- 03:00 AM
- 0
Sponsored Content
The Attacks that can Target your Windows Active Directory

Hackers commonly target Active Directory with various attack techniques spanning many attack vectors. Let's consider a few of these attacks and what organizations can do to protect themselves.
- Sponsored by Specops Software
- April 18, 2023
- 10:07 AM
- 1
WiFi protocol flaw allows attackers to hijack network traffic

Cybersecurity researchers have discovered a fundamental security flaw in the design of the IEEE 802.11 WiFi protocol standard, allowing attackers to trick access points into leaking network frames in plaintext form.
- Bill Toulas
- March 28, 2023
- 03:05 PM
- 0
CASPER attack steals data using air-gapped computer's internal speaker

Researchers at the School of Cyber Security at Korea University, Seoul, have presented a new covert channel attack named CASPER can leak data from air-gapped computers to a nearby smartphone at a rate of 20bits/sec.
- Bill Toulas
- March 12, 2023
- 10:18 AM
- 2
Illegal Solaris darknet market hijacked by competitor Kraken

Solaris, a large darknet marketplace focused on drugs and illegal substances, has been taken over by a smaller competitor named 'Kraken,' who claims to have hacked it on January 13, 2022.
- Bill Toulas
- January 18, 2023
- 02:21 PM
- 0
Trojan Puzzle attack trains AI assistants into suggesting malicious code

Researchers at the universities of California, Virginia, and Microsoft have devised a new poisoning attack that could trick AI-based coding assistants into suggesting dangerous code.
- Bill Toulas
- January 10, 2023
- 03:20 PM
- 0
Air-gapped PCs vulnerable to data theft via power supply radiation

A new attack method named COVID-bit uses electromagnetic waves to transmit data from air-gapped systems isolated from the internet over a distance of at least two meters (6.5 ft), where its captured by a receiver.
- Bill Toulas
- December 10, 2022
- 10:06 AM
- 7
Google blocks largest HTTPS DDoS attack 'reported to date'

A Google Cloud Armor customer was hit with a distributed denial-of-service (DDoS) attack over the HTTPS protocol that reached 46 million requests per second (RPS), making it the largest ever recorded of its kind.
- Ionut Ilascu
- August 18, 2022
- 12:00 PM
- 3